2017 CVE Vulnerabilities
17,113 CVEs published in 2017.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2017-16782 | — | — | 0.8% | Nov 10, 2017 | In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markd... |
| CVE-2017-16781 | — | — | 1.6% | Nov 10, 2017 | The installer in MyBB before 1.8.13 has XSS. |
| CVE-2017-16780 | — | — | 5.8% | Nov 10, 2017 | The installer in MyBB before 1.8.13 allows remote attackers to execute arbitrary code by writing to the configuration fi... |
| CVE-2017-16763 | — | — | 4.4% | Nov 10, 2017 | An exploitable vulnerability exists in the YAML parsing functionality in config.py in Confire 0.2.0. Due to the user-spe... |
| CVE-2017-16762 | — | — | 2.4% | Nov 10, 2017 | Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substri... |
| CVE-2017-16761 | — | — | 1.0% | Nov 10, 2017 | An Open Redirect vulnerability in Inedo BuildMaster before 5.8.2 allows remote attackers to redirect users to arbitrary ... |
| CVE-2017-16760 | — | — | 0.6% | Nov 10, 2017 | Inedo BuildMaster before 5.8.2 has XSS. |
| CVE-2017-16521 | — | — | 2.0% | Nov 10, 2017 | In Inedo BuildMaster before 5.8.2, XslTransform was used where XslCompiledTransform should have been used. |
| CVE-2017-9758 | — | — | 1.5% | Nov 10, 2017 | Savitech driver packages for Windows silently install a self-signed certificate into the Trusted Root Certification Auth... |
| CVE-2017-5201 | — | — | 1.3% | Nov 10, 2017 | NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allow remote authenticated users to obtain sensitive cluste... |
| CVE-2017-16754 | — | — | 1.8% | Nov 10, 2017 | Bolt before 3.3.6 does not properly restrict access to _profiler routes, related to EventListener/ProfilerListener.php a... |
| CVE-2017-16634 | — | — | 3.9% | Nov 10, 2017 | In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method. |
| CVE-2017-16633 | — | — | 1.5% | Nov 10, 2017 | In Joomla! before 3.8.2, a logic bug in com_fields exposed read-only information about a site's custom fields to unautho... |
| CVE-2017-16562 | — | — | 27.4% | Nov 10, 2017 | The UserPro plugin before 4.9.17.1 for WordPress, when used on a site with the "admin" username, allows remote attackers... |
| CVE-2017-16249 | — | — | 59.4% | Nov 10, 2017 | The Debut embedded http server contains a remotely exploitable denial of service where a single malformed HTTP POST requ... |
| CVE-2017-15638 | — | — | 1.2% | Nov 10, 2017 | The SuSEfirewall2 package before 3.6.312-2.13.1 in SUSE Linux Enterprise (SLE) Desktop 12 SP2, Server 12 SP2, and Server... |
| CVE-2017-12969 | — | — | 10.1% | Nov 10, 2017 | Buffer overflow in the ViewerCtrlLib.ViewerCtrl ActiveX control in Avaya IP Office Contact Center before 10.1.1 allows r... |
| CVE-2017-12803 | — | — | 2.2% | Nov 10, 2017 | The Node_ValidatePtr function in corec/corec/node/node.c in mkclean 0.8.9 allows remote attackers to cause a denial of s... |
| CVE-2017-12802 | — | — | 2.4% | Nov 10, 2017 | The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial ... |
| CVE-2017-12801 | — | — | 2.4% | Nov 10, 2017 | The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of ... |
| CVE-2017-12800 | — | — | 2.4% | Nov 10, 2017 | The EBML_FindNextElement function in ebmlmain.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial... |
| CVE-2017-12783 | — | — | 2.4% | Nov 10, 2017 | The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of s... |
| CVE-2017-12782 | — | — | 2.4% | Nov 10, 2017 | The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of servic... |
| CVE-2017-12781 | — | — | 2.4% | Nov 10, 2017 | The EBML_BufferToID function in ebmlelement.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial o... |
| CVE-2017-12780 | — | — | 2.4% | Nov 10, 2017 | The ReadData function in ebmlstring.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of servic... |
Check if your code is affected by 2017 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now